Survival of the fittest ... in security, not really. The weak still survive.
Is it that surprising? In the private sector, companies have R&D departments for continued innovation. In the government sector, agencies rely on the private sector. It is more stagnant and innovation is lacking.
Agencies lacking strong information security such as the IRS have findings piled up over many years and has not changed. The "catch-up" game has long been a problem of the government. Commercial banks have stronger security than some government agencies. This is not surprising at all. If a bank's security was weak, it would not survive. So why do agencies survive?
Obviously it is a critical component serving a purpose that is mission critical. But it should evolve and improve! In any industry or entity, evolution is what causes innovation and change. Technologies, concepts, processes, standards, etc. all evolve and change for continuous improvement.
Today's best security practices are a direct result of being proactive. This approach should be applied to everything security-related.
Subscribe to:
Post Comments (Atom)
Posts
1 comments: